4ffd31d9ba58fb368127166750034ff8fe2f6519de6b9b5b74284f003bceb42f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ffd31d9ba58fb368127166750034ff8fe2f6519de6b9b5b74284f003bceb42f
Size

6.9MB
MD5

b8ea7115e7ed33001fc4a1c3876a4dc7
SHA1

632d19c451671e9b18d49572093a881c48f64883
SHA256

4ffd31d9ba58fb368127166750034ff8fe2f6519de6b9b5b74284f003bceb42f
SHA512

f99092ceab0f0267c4cc442c0c0cd571a35e42a09674731439e5018a6134153e097f2067466ab62341a56012dac1327f2f604d136ae1c336e36d0f3b71dbc42b
SSDEEP

98304:Ts1P833HBrbnBfmSDxhkDJw/e4TRJpO4844rIM1VbbiGlULt4OiaRdDiWazud0:4M3HBrNmUiVL4npOFr7Vb44taHi7zj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ffd31d9ba58fb368127166750034ff8fe2f6519de6b9b5b74284f003bceb42f

Files

4ffd31d9ba58fb368127166750034ff8fe2f6519de6b9b5b74284f003bceb42f
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ